NetSight
critical10.0

CVE-2021-22657

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating syste…

Impact

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.

Affected products

VendorProductAffected versions
MyscadaMypro
through 8.20.0

Weakness classification

References